CVE-2014-3036

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-06-08 · updated 2026-06-17

Description

Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors.

Affected products

IBM Api Management: 3.0.0.0

References

http://secunia.com/advisories/59044
http://www-01.ibm.com/support/docview.wss?uid=swg1LI78000
http://www-01.ibm.com/support/docview.wss?uid=swg21674232
http://www.securityfocus.com/bid/67941
https://exchange.xforce.ibmcloud.com/vulnerabilities/93302
http://secunia.com/advisories/59044
http://www-01.ibm.com/support/docview.wss?uid=swg1LI78000
http://www-01.ibm.com/support/docview.wss?uid=swg21674232
http://www.securityfocus.com/bid/67941
https://exchange.xforce.ibmcloud.com/vulnerabilities/93302

Get alerted when CVE-2014-3036 or the next vulnerability affects your stack